Lucene search
Veracode Vulnerability DatabaseVERACODE:40201HistoryApr 20, 2023 - 4:47 a.m.
Arbitrary Code Injection
2023-04-2004:47:12
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
vm2 code injection vulnerability
exception sanitization
handleexception function
attacker
malicious code
sandboxed environment
EPSS
0.002
Percentile
57.3%
vm2 is vulnerable to Code Injection. The vulnerability exists due to lack of exception sanitization in the handleException() function which allows an attacker to inject and execute malicious code and break out of the sandboxed enviroment.
Related
ibm
ibm
githubexploit
githubexploit
Exploit for Injection in Vm2 Project Vm2
2024-02-08 07:03:32
Exploit for Injection in Vm2 Project Vm2
2023-12-10 08:32:26
Exploit for Injection in Vm2 Project Vm2
2024-06-04 10:01:41
cvelist
cvelist
CVE-2023-30547 Sandbox Escape in vm2
2023-04-17 21:42:10
github
github
vm2 Sandbox Escape vulnerability
2023-04-20 14:37:53
prion
prion
Code injection
2023-04-17 22:15:00
openvas
openvas
vm2 < 3.9.17 Sandbox Escape Vulnerability
2023-05-02 00:00:00
nvd
nvd
CVE-2023-30547
2023-04-17 22:15:10
nessus
nessus
Node.js Module vm2 < 3.9.17 Sandbox Breakout
2023-09-14 00:00:00
osv
osv
CVE-2023-30547
2023-04-17 22:15:10
vm2 Sandbox Escape vulnerability
2023-04-20 14:37:53
redhatcve
redhatcve
CVE-2023-30547
2023-04-18 07:33:32
cve
cve
CVE-2023-30547
2023-04-17 22:15:10
ubuntucve
ubuntucve
CVE-2023-30577
2023-07-26 00:00:00
redhat
redhat
thn
thn
Critical Flaws in vm2 JavaScript Library Can Lead to Remote Code Execution
2023-04-19 04:53:00